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DETAILED ACTION 

Drawings 

1 . The drawings are objected to because figure 2 ref 71 , 72, and 50 are not 
labeled. Corrected drawing sheets in compliance with 37 CFR 1.121(d) are 
required in reply to the Office action to avoid abandonment of the application. 
Any amended replacement drawing sheet should include all of the figures 
appearing on the immediate prior version of the sheet, even if only one figure is 
being amended. The figure or figure number of an amended drawing should not 
be labeled as "amended." If a drawing figure is to be canceled, the appropriate 
figure must be removed from the replacement sheet, and where necessary, the 
remaining figures must be renumbered and appropriate changes made to the 
brief description of the several views of the drawings for consistency. Additional 
replacement sheets may be necessary to show the renumbering of the remaining 
figures. Each drawing sheet submitted after the filing date of an application must 
be labeled in the top margin as either "Replacement Sheet" or "New Sheet" 
pursuant to 37 CFR 1.121(d). If the changes are not accepted by the examiner, 
the applicant will be notified and informed of any required corrective action in the 
next Office action. The objection to the drawings will not be held in abeyance. 

2. In addition to Replacement Sheets containing the corrected drawing 
figure(s), applicant is required to submit a marked-up copy of each Replacement 
Sheet including annotations indicating the changes made to the previous version. 
The marked-up copy must be clearly labeled as "Annotated Sheets" and must be 
presented in the amendment or remarks section that explains the change(s) to 
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the drawings. See 37 CFR 1121(d)(1). Failure to timely submit the proposed 
drawing and marked-up copy will result in the abandonment of the application. 

Claim Objections 

3. The numbering of claims is not in accordance with 37 CFR 1 .126 which 
requires the original numbering of the claims to be preserved throughout the 
prosecution. When claims are canceled, the remaining claims must not be 
renumbered. When new claims are presented, they must be numbered 
consecutively beginning with the number next following the highest numbered 
claims previously presented (whether entered or not). 

Misnumbered claims t1, t2, t3, t4, t5, t47 have been renumbered 42, 43, 
44, 45, 46, and 47, 

Claim Rejections - 35 USC § 112 

4. The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the manner and 
process of making and using it, in such full, clear, concise, and exact terms as to enable any 
person skilled in the art to which it pertains, or with which it is most nearly connected, to make 
and use the same and shall set forth the best mode contemplated by the inventor of carrying 
out his invention. 

5. Claims 20 -23 are rejected under 35 U.S.C. 112, first paragraph, as based 
on a disclosure which is not enabling. The term "asymmetric encryption 
algorithm" critical or essential to the practice of the invention, but not included in 
the claim(s) is not enabled by the disclosure. See In re Mayhew, 527 F.2d 1229, 
188 USPQ 356 (CCPA 1976). 

Regarding claims 20 and 22, the term "asymmetric encryption algorithm" 
is not enabled by the disclosure, and the term is interpreted as encryption. 
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Claims 21 and 23 are rejected as it is a dependent claim of claim 20 which 
is rejected. 

Claim Rejections - 35 USC § 102 

6. The following is a quotation of the appropriate paragraphs of 35 
U.S.C. 102 that form the basis for the rejections under this section made in this 
Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 
122(b), by another filed in the United States before the invention by the applicant for patent or 
(2) a patent granted on an application for patent by another filed in the United States before 
the invention by the applicant for patent, except that an international application filed under 
the treaty defined in section 351(a) shall have the effects for purposes of this subsection of an 
application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

7. Claims 1-11, 24-26, 28, 30, 32, 34-41, 46, 48-49, 51-52, 54-55, and 57-58 
are rejected under 35 U.S.C. 102(e) as being anticipated by Normura et al. 
(US6930984). 

Regarding claim 1, Normura et al. disclose network-device control system 
and apparatus comprising: 

• monitoring, at a network device operating in an unconfigured mode, for a 
configuration message, wherein the configuration message includes 
information sufficient for the network device to establish a network 
connection with a remote device (see column 7 line 10-16 and line 33); 

• configuring the network device using the configuration information in the 
configuration message (see column 7 line 35); and 
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• switching the network device to a configured mode (see column 7 line 
35-43). 

Regarding claim 2, Normura et al. teaches transmitting a message to the 
remote device (see column 7 line 40). 

Regarding claim 3, Normura et al. teaches the network device is disposed on 
a communications path between a first network and a second network; and 
wherein the method further comprises 

• forwarding at[ packets, other than configuration messages, along the 
communications path (see column 14 line 55-61). 

Regarding claim 4, Normura et al. teaches the transmitting step comprises 
initiating a connection to the remote device (see column 14 line 58-66). 

Regarding claim 5, Normura et al. teaches further comprising receiving 
additional configuration from the remote device (see column 12 line 45-49). 

Regarding claim 6, Normura et al. teaches the remote device is a network 
management system (see figure 1 network device controller). 

Regarding claim 7, Normura et al. teaches further comprising validating the 
configuration message before the configuring step (see column 12 line 63 - 
column 13 line 25). 
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Regarding claim 8, Normura et al. teaches the configuration message is 
transmitted from a remote device on the first network and addressed to a 
destination host on the second network (see column 14 line 58-61). 

Regarding claim 9, Normura et al. disclose a method facilitating remote 
deployment and configuration of a network device physically installed on a first 
network, wherein the network device is operative to intercept configuration 
messages, comprising: 

• composing a configuration message inctuding configuration information 
corresponding to a network device (see column 7 line 35); and 

• transmitting from a second network a configuration message to a 
destination host in the first network, wherein the network device is 
disposed on the communications path between the second network and 
the destination host (see column 13 line 12-25 and column14 line 55- 
61). 

Regarding claim 10, Normura et al. teaches further comprising repeating the 
transmitting step until a response to the configuration message is received from 
the network device (see column14 line 40-44). 

Regarding claim 11, Normura et al. teaches the configuration information 
comprises information sufficient for the network device to establish a network 
connection with a remote device (see column 14 line 55-61). 
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Regarding claim 24, Normura et al. teaches a method facilitating remote 
deployment of network devices, comprising 

• monitoring, at a network device in an unconfigured mode, for a 
configuration message transmitted by a network management system, 
wherein the configuration message includes configuration information for 
the network device (see column 7 line 10-16 and line 33); 

• after detection of a configuration message, validating the configuration 
message (see column 12 line 63 - column 13 line 25); 

• if the configuration message is valid, configuring the network device using 
the configuration information in the configuration message (see column 7 
line35-43). 

Regarding claim 25, Normura et al. teaches the configuration message 
includes information sufficient for the network device to establish a network 
connection to network management device (see column 14 line 55-61). 

Regarding claim 26, Normura et al. teaches further comprising forwarding on 
art packets other than configuration messages (see column 14 line 55-61). 

Regarding claim 28, Normura et al. teaches the configuration information 
comprises a network address for the network device, and a network address 
corresponding to the network management system (see column 8 line 23-24). 
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Regarding claim 30, Normura et al. teaches the network device is operably 
connected to a first network comprising a gateway router having a gateway 
network address; wherein the configuration information in the configuration 
message comprises the network address of a gateway router; and wherein the 
validating step comprises determining whether the network address of the 
gateway router matches the gateway network address of the gateway router (see 
column 15 line 26-45). 

Regarding claim 32, Normura et al. teaches the monitoring step comprises 

• intercepting, at a first network interface, a configuration message 
transmitted by a network management system (see column 7 line 35-43); 

• passing other packets to a second network interface for forwarding atong 
a communications path (see column 14 line 55-61). 

Regarding claim 34, Normura et al. teaches method facilitating remote 
deployment of network devices, comprising: 

• intercepting, at a network device in an unconfigured state, a configuration 
message transmitted by a network management system, wherein the 
configuration message includes configuration information for the network 
device (see column7 line 10-43); 

• after detection of a configuration message, validating the configuration 
message (see column 12 line 63 - column 13 line 25); 
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• if the configuration message is valid, configuring the network device using 
the configuration information in the configuration message (see column 
14 line 58-61) 

Regarding claim 35, Normura et al. teaches the configuration information 
includes the network address of a network management system, and wherein the 
method further comprises 

establishing a connection to the network management system using the 
network address in the configuration information (see column 15 line 26-45). 

Regarding claim 36, Normura et aL teaches network device allowing for 
automated, remote deployment, comprising: 

• at least one network interface operative to transmit and receive packets . 
over a computer network (see figure 1 B1 Event Receiver and B6 
configuration information transmitter); 

• a configuration interface module operative to configure the network device 
based on received configuration information (see figure 1 B6 
configuration information transmitter); and 

• a configuration daemon operative, when the network device is an 
unconfigured state (see figure 1 B2 Configure Determination unit), to 

o monitor the at [east one network interface for configuration 
messages (see column 7 line 10-16); 
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o validate configuration messages (see column 12 line 63-column 
13 line 25); and 

o invoke the configuration interface module after receipt of a valid 
configuration message (see column 7 line 35-43) 

Regarding claim 37, Normura et al. teaches comprising first and second 
network interfaces operative to transmit and receive packets over a computer 
network; and wherein the configuration daemon (see figure 1 B2 Configure 
Determination unit) is further operative to 

• forward packets, intended for other network devices, received at the first 
network interface for transmission from the second network interface (see 
figure 8 application-launch event); and 

• forward packets, intended for other network devices, received at the 
second network interface for transmission from the first network interface 
(see column 13 line 13-18). 

Regarding claim 38, Normura et al. teaches the configuration interface 
module is operative to configure the network device to communicate with a 
remote network device using information in the configuration message (see 
column 7 line 35-43). 

Regarding claim 39, Normura et al. teaches network device facilitating remote 
deployment and configuration, comprising: 
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• a configuration daemon operative (see figure 1 B2 configure 
determination unit), in an unconfigured mode, to 

o monitor for configuration messages including configuration 
information, sufficient to configure the network device to 
communicate with a remote device over a computer network (see 
column 7 line 10-43); and 

• a configuration interface module operative to 

o initially configure the network device to communicate with a remote 
device over a computer network based on configuration information 
in a configuration message received by the configuration daemon 
(see column 14 line 58-66); and 

• communicate with the remote device to receive additional configuration 
information (see column 12 45-49). 

Regarding claim 40, Normura et al. teaches further comprising: 

at least one network interface operative (see figure 1 B1 event Receiver) to 
transmit and receive packets over a computer network; and wherein the 
configuration daemon is operative to monitor for configuration messages 
received at the at least one network interface (see column 7 line 10-16). 

Regarding claim 41, Normura et al. teaches in a network environment 
comprising a first network and a second network, wherein the first network 
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includes a gateway router allowing access to resources on at least the second 
network, a method facilitating remote configuration of a network device physically 
installed on the first network, the method comprising 

• identifying a destination host on the first network, wherein an unconfigured 
network device is disposed on the communications path between the 
gateway router and the network device, wherein the network device is 
operative, in an unconfigured mode, to intercept configuration messages 
(see column7 line 10-16); 

• transmitting a configuration message to the first network, wherein the. 
configuration message is addressed to the destination host (see column 
7 line 35). 

Regarding claim 46, Normura et al. teaches the configuration message 
includes information sufficient for the network device to establish a network 
connection with a remote device (see column 14 line 55-61). 

Regarding claim 48, Normura et al. teaches method facilitating remote, 
automated deployment of a network device on a network, comprising 

• establishing, in an unconfigured mode, a connection with a remote device 
for configuration information (see column7 line 10-16); 

• providing, during the connection, a hardware profile of a network device 
(see column15 line 26-45); 
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• receiving configuration information from the remote device based on the 
hardware profile (see column 7 line 35-43). 

Regarding claim 49, Normura et al. teaches further comprising: 

obtaining a network address before the establishing step (see column 15 
line 26-45). 

Regarding claim 51, Normura et al. teaches further comprising: 

• gathering network topology information characterizing the topology of the 
network to which the network device is attached (see column 15 line 10- 
25); and 

• providing the network topology information to the remote device; and 
wherein the configuration information received from the remote device is 
based on the hardware profile and the network topology information (see 
column 15 line 10-25). 

Regarding claim 52, Normura et al. teaches the network topology information 
comprises information concerning at least one host neighboring the network 
device (see column 15 line 15). 

Regarding claim 54, Normura et al. teaches the establishing step is 
performed in response to the receipt of a configuration message transmitted by 
the remote device (see column 13 Mne12-25). 
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Regarding claim 55, Normura et al. teaches the configuration message is 
addressed to the broadcast address of the network (see column 14 line 59-66). 

Regarding claim 57, Normura et al. teaches a second network device 
connected to the network is operative to broadcast the network address of the 
remote device (see column 14 line 59-66). 

Regarding claim 58, Normura et al. teaches the network comprises a second 
network device operative to transmit the network address of the remote device in 
response to a request; and wherein the method further comprises broadcasting a 
request for the network address of the remote device (see column 14 line 61- 
66). 

Claim Rejections - 35 USC § 103 

8. The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1 , 
148 USPQ 459 (1966), that are applied for establishing a background for 
determining obviousness under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at 
issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness or nonobviousness. 

9. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 102 of this title, if the differences between the. subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 
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10. Claims 27, and 42-45 is rejected under 35 U.S.C. 103(a) as being 
unpatentable over Normura et al in view of its background. 

Regarding claims 27, and 42-45, Normura et al. disclose all the subject matter 
of the claimed invention with the exception of forwarding on configuration 
messages that are not valid relative to the network device; 

• the configuration message is formatted in a manner that causes the 
destination host to ignore the configuration message. 

• the configuration message is formatted in a manner that causes the 
destination host to discard the configuration message. 

• the configuration message is formatted according to a protocol that is 
not implemented by the destination host. 

• the configuration message is formatted according to a protocol that is 
not understood by the destination host. 

The background of Normura et al. from the same or similar fields of 
endeavor teaches the use of network device that does not support RSVP exists 
in the network, this device cannot undergo any control of quality (see Normura 
et al. background column 2 line 58-67). Thus, it would have been obvious to 
one of ordinary skill in the art at the time of the invention to use the a RSVP 
exists in the network, this device cannot undergo any control of quality in the 
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network-device control system and apparatus in order to increase processing 
capability of each network device (see column 3 line 3). 

1 1 . The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 102 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

12. Claims 12, 47, and 53 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Normura et al in view of Knop et al. (US2005/0013255). 

Regarding claims 12, 47, and 53, Normura et al. disclose all the subject 
matter of the claimed invention with the exception of the configuration information 
including a network address for the network device, a sub-network mask for the 
first network, a network address for the remote device, and the network address 
of the gateway router corresponding to the first network. 

Knop et al. from the same or similar fields of endeavor teaches the use of 
initialization information includes such information base Internet Protocol (IP) 
address, a subnet mask and a list of logical names of all network interfaces in a 
cluster (see Knop et al. paragraph 33-37). Thus, it would have been obvious to 
one of ordinary skill in the art at the time of the invention to use the initialization 
information as taught by Knop et al. in the network-device control system an 
apparatus of Normura et al. in order to provide a more efficiently monitor 
availability of computers in a cluster (see Knop et al. paragraph 10). 
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13. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 1 02 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

14. Claims 13-18, 21, 29, and 33 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Normura et al in view of Ylonen et al. 
(US2002/0191548). 

Regarding claims 13-18, 21, 29, and 33, Normura et al disclose all the 
subject matter of the claimed invention with the exception of configuration 
information includes: 

cryptographic key; encryption key; a secret string of text; a random 
number; network address of the destination host; network device is pre- 
configured with the secret string of text; public encryption key corresponding to 
the private key; configuration message is encrypted; decrypting the configuration 
information. 

Ylonen et al. from the same or similar fields of endeavor teaches the use 
of encryption and decryption of configuration information (see Ylonen et al. 
paragraph 50, 52, 63, and 217) and public and private key (see Ylonen et al. 
paragraph 52 and 63) and key material stored in the secure storage deice (see 
Ylonen et al. paragraph 88). Thus, it would have been obvious to one of 
ordinary skill in the art at the time of the invention to use the encryption algorithm 
as taught by Ylonen et al. in the in the network-device control system an 
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apparatus of Normura et al. in order to provide cryptographic authentication and 
confidentiality of traffic between two communicating network nodes (see Ylonen 
et al. paragraph 7) 

15. Claims 19, 20, and 22 rejected under 35 U.S.C. 103(a) as being 
unpatentable over Normura et al in view of Ylonen et al. 

Regarding claims 19, 20, and 22, Normura et al disclose all the subject 
matter of the claimed invention with the exception of symmetric encryption key, 
and private encryption key. 

Ylonen et al. from the same or similar fields of endeavor teaches the use 
of encryption and decryption of configuration information (see Ylonen et al. 
paragraph 50, 52, 63, and 217) and public and private key (see Ylonen et al. 
paragraph 52 and 63). And although Ylonen et al. does not specifically disclose 
the symmetric encryption key, such limitation are merely a matter of design 
choice and would have been obvious in the system of Normura et al and Ylonen 
et al. The limitations in claims do not define a patentably distinct invention over 
that in Normura et al and Ylonen et al. since both invention as a whole. 
Therefore, the symmetric encryption key in Normura et al and Ylonen et al. 
system would have been a matter of obvious design choice to one ordinary skill 
in the art. 

16. Claims 50, and 56 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Normura et al in view of Ylonen et al. 

Regarding claims 50, and 56, Normura et al disclose all the subject matter 
of the claimed invention with the exception of DHCP server operative to provide 
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the network address of the remote device in a field associated with a DHCP 
response transmitted to the network device. 

Ylonen et al. from the same or similar fields of endeavor teaches the use 
of DHCP configure devices (see Ylonen et al. paragraph 28, 56, 59 and 75). 
Thus, it would have been obvious to one of ordinary skill in the art at the time of 
the invention to use DHCP configure devices as taught by Ylonen et al. in the in 
the network-device control system an apparatus of Normura et al. in order to 
obtain devices configuration information (see Ylonen et al. paragraph 27). 

17. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 102 of this title; if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

18. Claim 31 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Normura et al in view of Traversat et al. (US2007/0097885). 

Regarding claim 31 , Normura et al disclose all the subject matter of the 
claimed invention with the exception of determining step comprises broadcast an 
address resolution protocol request, including the network address in the 
configuration message, on the network. 

Traversat et al. from the same or similar fields of endeavor teaches the 
use of broadcast a query message requesting information (see Traversat et al. 
paragraph 27) and ARP requests are sent for any single target IP address (see 
Traversat et al. paragraph 309). Thus, it would have been obvious to one of 
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ordinary skill in the art at the time of the invention to use ARP requesting 
message in the in the network-device control system an apparatus of Normura et 
al. in order to enhance system efficiency. 

Conclusion 

1 9. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. . 

Simon et al. (US2005/01 35268) disclose mesh networks with end device 
recognition. 

Kupershmidt (US2003/0204574) disclose system and method for configuring 
network access devices 

Aures et al. (US2004/0240397) disclose method, system and apparatus for 
managing connections in a telecommunications network 
Sandick et al. (US6684241) disclose apparatus and method of configuring a 
network device 

Ackermann-Markes et al. (US2006/0209714) disclose method for the automatic 
configuration of a communications device. 

Mititelu (US2006/01 87853) discloses configuring virtual LANs on layer 2 

20. Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Wutchung Chu whose telephone number is 
571 270 141 1 . The examiner can normally be reached on Monday - Friday 1000 
-1500EST. 
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If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Edan D. Orgad can be reached on 571 272 7884. The 
fax phone number for the organization where this application or proceeding is 
assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). If you would like assistance from a USPTO Customer Service 
Representative or access to the automated information system, call 800-786- 
9199 (IN USA OR CANADA) or 571-272-1000. 
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Wutchung Chu 
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